[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:... (292f0a0d) · Commits · e / os / android_packages_modules_Bluetooth

system/stack/l2cap/l2c_fcr.c

+8 −0

Original line number	Diff line number	Diff line
		@@ -849,6 +849,14 @@ void l2c_lcc_proc_pdu(tL2C_CCB p_ccb, BT_HDR p_buf)
		return;
		}

		if (sdu_length < p_buf->len) {
		L2CAP_TRACE_ERROR("%s: Invalid sdu_length: %d", __func__, sdu_length);
		android_errorWriteWithInfoLog(0x534e4554, "112321180", -1, NULL, 0);
		/* Discard the buffer */
		osi_free(p_buf);
		return;
		}


		if ((p_data = (BT_HDR *) osi_malloc(L2CAP_MAX_BUF_SIZE)) == NULL)
		{